Granted Patent B1

US 9,231,920 · App. 14/275,824 · Granted Jan 5, 2016

Abstract

Claims (61)

1. A method for anonymizing data to be transmitted to a destination computing device, comprising:

receiving data to be transmitted from a user computer to the destination computing device over a network for storage, the data including a plurality of characters to form a word;

determining an accent value for the word of the received data;

generating an accent value word with a plurality of characters indicative of the accent value for the word of the received data;

anonymizing the word of the received data based on a selective anonymization strategy to derive an anomymized word of the received data; and

transmitting said anonymized word of the received data, said accent value word and data indicative of the selected anonymization strategy for the word to the destination computing device over the network for storage, wherein one or more of the steps are executed in a computing device.

2. The method of claim 1 , wherein determining an accent value further including:

determining whether preserving accent for the data is selected; and

calculating the accent value for the word of the received data based on the selection.

3. The method of claim 1 , further including:

receiving a selectively retrieved anonymized word of the received data in response to a request;

determining the accent value;

de-anonymize the retrieved anonymized word of the received data based on the data indicative of the selected anonymization strategy;

accenting the de-anonymized word of the received data based on the accent value; and

returning the de-anonymized word of the received data with accent, in response to the request.

4. The method of claim 1 further including:

receiving meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;

presenting at least one data field of the application along with a plurality of anonymization strategies for selection;

associating one of the anonymization strategy to the at least one data field of the application, based on the selection; and

storing the associated anonymization strategy for the at least one data field of the application.

5. The method of claim 4 , further including

retrieving stored anonymization strategy for one or more data fields of the data to be transmitted;

performing the anonymization of original data in one or more data fields based on the retrieved anonymization strategy for the one or more data fields; and

assembling data to be transmitted, using anonymized data fields.

6. The method of claim 1 , wherein the anonymized data is configured to preserve the order of the word.

7. The method of claim 1 , wherein the anonymized data is configured to be searchable using anonymized keyword.

8. The method of claim 1 , wherein the anonymization strategy includes anonymization based on at least one of tokenization and encryption.

9. The method of claim 8 , wherein the anonymization based on tokenization includes at least one of random token anonymization, sortable token anonymization and case-insensitive searchable anonymization.

10. The method of claim 8 , wherein the anonymization based on encryption includes at least one of encryption that permits exact word matching search, encryption that permits search and encryption that permits partial string and wild card searches.

11. An anonymization system to anonymize data transmitted to a destination computing device, comprising:

an anonymization strategy module to store anonymization strategy for data anonymization;

a logic to receive data to be transmitted from a user computer to the destination computing device over a network for storage; and

an anonymization module to selectively anonymize data based on a selected anonymization strategy to generate an anonymized data, wherein,

the received data includes a plurality of characters to form a word;

an accent value for the word of the received data is determined;

an accent value word with a plurality of characters indicative of the accent value for the word of the received data is generated; and

an anonymized word of the received data is derived from the word of the received data based on a selective anonymization strategy;

said anonymized word of the received data, said accent value word and data indicative of the selected anonymization strategy for the word is transmitted to the destination computing device over the network for storage.

12. The system of claim 11 , further including:

retrieve the anonymization strategy for the data from the anonymization strategy module to determine whether preserving accent for the data is selected; and

calculate the accent value for the word of the received data based on the selection.

13. The system of claim 11 , wherein the system further including:

a de-anonymization module configured to

receive a selectively retrieved anonymized word of the received data in response to a request;

determine the accent value;

de-anonymize the retrieved stored anonymized word of the received data based on the data indicative of the selected anonymization strategy;

accent the de-anonymized word of the received data based on the accent value; and

return the de-anonymized word of the received data with accent, in response to the request.

14. The system of claim 11 further including a management console module configured to

receive meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;

present at least one data field of the application along with a plurality of anonymization strategies for selection;

associate one of the anonymization strategy to the at least one data field of the application, based on the selection; and

store the associated anonymization strategy for the at least one data field of the application, using the anonymization strategy module.

15. The system of claim 14 , wherein the anonymization module retrieves stored anonymization strategy for one or more data fields of the data to be transmitted;

performs the anonymization of original data in one or more data fields based on the retrieved anonymization strategy for the one or more data fields; and

assemble data to be transmitted, using anonymized data fields.

16. The system of claim 11 , wherein the anonymized data is configured to preserve the order of the word.

17. The system of claim 11 , wherein the anonymized data is configured to be searchable using anonymized keyword.

18. The system of claim 11 , wherein the anonymization strategy includes anonymization based on at least one of tokenization and encryption.

19. The system of claim 18 , wherein the anonymization based on tokenization includes at least one of random token anonymization, sortable token anonymization and case-insensitive searchable anonymization.

20. The system of claim 18 , wherein the anonymization based on encryption includes at least one of encryption that permits exact word matching search, encryption that permits search and encryption that permits partial string and wild card searches.

Assignments (14)